The security of technology providers’ supply chains are being called into question after news that a phone app for Android disguised to look like a Netflix app comes preinstalled on devices from multiple manufacturers.